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Abstract: A high degree of reliability for critical data transmission is required in body 
sensor networks (BSNs). However, BSNs are usually vulnerable to channel impairments 
due to body fading effect and RF interference, which may potentially cause data 
transmission to be unreliable. In this paper, an adaptive and flexible fault-tolerant 
communication scheme for BSNs, namely AFTCS, is proposed. AFTCS adopts a channel 
bandwidth reservation strategy to provide reliable data transmission when channel 
impairments occur. In order to fulfill the reliability requirements of critical sensors, 
fault-tolerant priority and queue are employed to adaptively adjust the channel bandwidth 
allocation. Simulation results show that AFTCS can alleviate the effect of channel 
impairments, while yielding lower packet loss rate and latency for critical sensors at 
runtime. 

Keywords: body sensor networks; fault tolerance; quality of service; priority; resource 
reservation; health monitoring 



1. Introduction 

With recent advances in intelligent (bio-) medical sensors, low-power integrated circuits and 
wireless networking technologies. Body Sensor Networks (BSNs) have been applied in many areas, 
especially in human health monitoring [1-5]. By outfitting patients with wireless wearable or implanted 



Sensors 2010, 10 



9591 



vital sign sensors, detailed real-time data on physiological status can be continuously sampled [6,7]. 
Although BSN shares many of the same challenges with general wireless sensor networks (WSNs), a 
number of BSN-specific challenges could be specified. 

BSNs often demand high degrees of reliability and specific message latency requirements for 
real-time health monitoring [8]. However, BSNs have fewer and smaller nodes compared with 
conventional WSNs. Smaller nodes imply smaller batteries, creating stricter constrains on the energy 
consumed by processing, storage, and communication resources [9]. Usually, BSNs are vulnerable to 
channel impairments due to body fading effects and/or RF interference [10]. The radio channel 
assigned to the BSN services is not always clean and sometimes, even the efficient coding schemes 
used to combat interference may fail. Channel impairments can cause unreliable data transmission and 
high Bit Error Rate (BER). Hence in some cases the critical data can't be sent to control nodes in time. 
Consequently, the doctor may make wrong diagnosis and the patient may be delayed to be cured and 
even die. In addition, the packet loss results in data retransmission. Because the buffer of a biosensor is 
often very limited, data retransmissions will consume much energy, thus impelling the node to fail. 
Therefore, it has become crucially important to provide a fault-tolerant communication scheme for 
BSNs to guarantee reliable data transmission. 

In BSNs, biosensors gathering different types of physiological data may have different reliability 
requirements [11]. For example, heart rate sensors are often considered more important than blood 
pressure sensors, and hence should be served first under the condition of lack of shared resources 
(e.g., bandwidth). At the same time, the level of reliability requirements may change dynamically at 
runtime. For instance, the reliability requirement of the blood pressure sensor might be low when blood 
pressure readings are in normal range, but the reliability requirement will become much more rigorous 
when the readings indicate hypotension or hypertension. As a consequence, the system needs to 
dynamically maintain the reliability requirements of sensors to provide reliability assurance for the 
sensor nodes with high demand of reliability. 

In this paper we present an adaptive and flexible fault-tolerant communication scheme for BSNs, 
namely AFTCS. When channel impairments occur, AFTCS can provide reliable data transmission for 
critical sensors by reserving channel bandwidth according to the perceived information about human 
physiological status, external environment, and the system itself. Fault-tolerant priority and queue are 
employed to adaptively adjust the channel resource allocation. Simulations have been conducted to 
evaluate the performance of the proposed scheme. Results are presented and analyzed. 

The rest of the paper is organized as follows. In Section 2, we summarize the related work. 
Section 3 presents the related variables used in the AFTCS scheme and its application scenario. The 
detailed description of AFTCS is given in Section 4. In Section 5, the performance of AFTCS is 
evaluated. Finally, we conclude the paper and outline some future work in Section 6. 

2. Related Work 

The growing interest in BSNs and the continual emergence of new techniques have inspired some 
efforts to study the reliability and quality-of- service (QoS) of BSNs. Otal et al [6,12,13] proposed a 
novel QoS cross-layer scheduling mechanism based on fuzzy-logic rules for body sensor networks. An 
energy-saving distributed queuing MAC protocol is adopted. It can guarantee that all packets are 
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served with a specific BER and within particular latency limit while keeping low power consumption. 
However, it neglects different reliability requirements of different types of biosensors. In [11], the 
challenges brought about by BSN applications are presented and a statistical bandwidth strategy, i.e., 
BodyQoS, is proposed to guarantee reliable data communication. However, the dynamic change in 
reliability requirements of sensors is not considered in BodyQoS. Natarajan et al. highlighted the 
existence of the inter-user interference effect in BSN from the perspective of network architectures 
in [14], and make a preliminary investigation of the impact of inter-user interference and implement an 
instance with a fixed WSN infrastructure to reduce the interference between users in [15]. 
Braem et al. [16,17] modeled probabilistic connectivity in multi-hop body sensor networks to 
determine ways to improve reliability, which can guarantee k-connectivity between nodes. 
Qiao et al. [18] proposed a multi-homed body sensor network framework and investigate handover 
strategies during sensor nodes' movement to increase data reliability for BSNs. In [19] a novel 
packaging technology for BSN based on non-conductive thermoplastic polyurethane adhesive is 
presented to connect electronic modules with textile circuits in a cost efficient and reliable way. 

Although existing schemes [6,11-19] provide some solutions to improve fault-tolerant performance 
of BSN, designing fault tolerant BSNs to deal with channel impairments is still a challenging issue. In 
this paper, an adaptive and flexible fault tolerant communication scheme (AFTCS) for BSN is 
proposed. Major differences between this work and the aforementioned schemes include: 

(1) In order to fulfill the reliability requirement of critical sensors, fault-tolerant priority and queue 
are employed to adaptively adjust the channel resource allocation. Thus it can adaptively provide the 
reliability assurance for the sensors with high demand of reliability. 

(2) A resource reservation method based on dynamic priority queue is presented, including 
bandwidth measurement, bandwidth requirements calculation and bandwidth allocation methods. In 
AFTCS, the fault-tolerant priority dynamically changes according to the fault-related information, 
which can reflect the dynamic change in reliability requirements of sensors. In case of channel 
impairments, the packet loss rates for critical sensors will be decreased after channel reservation, and 
the times of retransmission will be reduced, thus lowering the average transmission latency. 

3. Preliminaries 

In this section, we describe the application scenario. The variables used in the AFTCS scheme will 
be defined. We consider a scenario where the BSN is formed by a collection of biosensors, control 
nodes and a base station, as shown in Figure 1. In general, the biosensors are wireless wearable or 
implanted vital sign sensors which consist of a processor, memory, transceiver, sensors and a power 
unit. Each biosensor node is typically capable of sensing, processing, storing and transmitting the data. 
The control node periodically sends the sampled data to the medical server in the hospital through the 
base station, where they are stored for further processing [20]. 

Due to the size and energy consumption restrictions, biosensors (such as sweat, EKG, temperature) 
cannot afford heavy computation and communication. Compared with biosensors, the control node 
(such as a cell phone or PDA) and the base station have comparatively higher transmission rate and 
computation power. In other words, BSN is a typical asymmetric structure. 

We first give the definitions of some variables used in the AFTCS scheme, as listed in Table 1. 
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Definition 1: Fault-tolerant priority p. p indicates the level of reliability requirements of a sensor. It 
can be dynamically adjusted at runtime. 

Definition 2: Fault-tolerant priority set. Each sensor has a fault-tolerant priority set. Based on the 
fault-related information, the control node dynamically selects an appropriate priority for the sensor 
from its priority set. 

Definition 3: Fault-tolerant priority queue Q. The 2 is a priority queue managing the fault-tolerant 
priorities of all the sensors in the system. The sensors in Q are sorted by priority in descending order. 

Figure 1. BSN application scenario. 
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Table 1. Variables and Notations. 



Variable Description 



Tinterval 

Npkt 
Spkt 

TminPkt 
TmaxPkt 

Si 
Ti 
Dt 
T 

^ wait 
^ received 

Sizcpkt 

SiZCpollingPkt 
^^effective 

6 
P 

niip 

Sip(t) 

^ip(t) 

BWideal 



Length of each interval divided in VMAC 

Maximum of packets handled within each interval 

Effective data payload size in bytes 

Minimum response time for handling a packet request 

Maximum response time for handling a packet request 

A sensor with a specific function 

The time for MAC to send a packet for sensor Si 

Packet number should be sent within TiXDi for sensor Si 

Actual wait time of the control node in a polling process 

Number of packets received by the control node 

Data payload of data packet size in bytes 

Data payload of polling packet size in bytes 

Effective bandwidth 

Activation threshold 

Fault-tolerant priority 

Priority tuner for fault-tolerant priority p of sensor Si 
Adjustment factor of priority p for sensor Si 
The time that Si wants to maintain p at time t 
Ideal bandwidth 
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Table 1. Com. 





Minimum packets transmitted in each interval for high delay sensitivity sensors 


required 


Bandwidth requirements 


^ yyCScontrol 


Bandwidth reservations for non-polling packets 


^ SCaware 
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BWsCdata 


Bandwidth reservations for sampled data packets 


BWcSpolling 


Bandwidth reservations for polling packets 


Qreserved 


Reservation sensor queue 


Qremoved 


The queue containing all sensors removed from reservation 


Qnewreserved 


New Qreserved ^ftcr rc-rcscrvation 


Qnewremoved 


New Qremoved ^ftcr rc-rcscrvation 



4. Adaptive Fault-Tolerant Communication Scheme 

Figure 2 illustrates the AFTCS scheme. AFTCS consists of three parts: fault-related information 
collection, fault-tolerant priority queue management and channel resource reservation based on priority 
queue. Biosensors collect and send physiological data and some fault-related information to the control 
node. They also execute commands from the control node. The control node analyzes perceived 
fault-related information, dynamically changes fault-tolerant priority of the sensors and allocates 
channel resources to different sensors to reduce the effect of channel impairments. Obviously, the 
AFTCS scheme is entirely consistent with the asymmetric structure of BSN. In order to guarantee the 
priorities of critical sensors when the channel resource is scarce, the fault-tolerant priority will be 
dynamically adjusted. We use the similar resource reservation approach used in [11,21] to address 
channel impairments. The reserved bandwidth is adjusted according to fault-tolerant priority. 

Figure 2. Schematic diagram of AFTCS. 
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4.1. Fault-Related Information Collection 

The fault-related information collection module is responsible for obtaining the specific information 
from human body, physical environment, and the BSN itself. Based on the collected information, we 
can determine the reliability requirements of the sensors during runtime. In AFTCS, three kinds of 
fault-related information are collected: 

(1) Bioinformation. The bioinformation is mainly physiological data collected by biosensors, such 
as body temperature, heart rate and blood pressure, etc. For a specific biosensor, its reliability 
requirement might be low when the readings are in normal range (e.g., the range of a body temperature 
sensor's reading is 36 °C-37.2 °C), but the level of reliability requirements should increase when the 
readings indicate abnormality (e.g., the reading of a body temperature sensor is higher than 37.5 °C). 

(2) Environmental information. The environmental factors (temperature, humidity, light, etc.) may 
affect the health condition of the patient. Therefore, the environmental information will influence the 
reliability requirement of the biosensor. For example, in warm and humid regions, where water is 
available as a transmission medium, Vibrio cholerae may proliferate rapidly to the level of an infective 
dose. Hence, a higher level of fault tolerance should be provided for the biosensors that collect Vibrio 
cholerae data under the conditions of high temperature and high humidity. 

(3) Runtime system information. These parameters reflect the reliability status of sensor nodes, 
which include buffer usage, the residual battery life, etc. This information can be derived from an inner 
hardware memory of the biosensor. For example, if the buffer utilization of a certain sensor is larger 
than 90%, then its reliability requirement will increase; on the other hand, when a sensor's buffer 
utilization is normal (e.g., 50%), its reliability requirement will not increase or even decrease. 

4.2. Fault-Tolerant Priority Queue 

In order to guarantee the priorities of critical sensors, the control node maintains a fault-tolerant 
priority queue to manage the current reliability requirements of each sensor. The fault-tolerant priority 
of a sensor can be statically configured by the clinician through the user interface. It can also be 
dynamically adjusted according to the perceived fault-related information. An example of the 
fault-tolerant priority queue containing 5 sensors is shown in Figure 3, where a smaller value indicates 
a higher priority. 

Figure 3. A fault-tolerant priority queue. 
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Each sensor has a fault-tolerant priority set. For example, the priority set of sensor is (1, 3}, i.e., 
the control node can only choose 1 or 3 as the current fault-tolerant priority for Si. When two sensors 
have the same fault-tolerant priority, the one requiring less bandwidth reservation (i.e., BWscdata, see 
Section 4.3) is served first. For example, for ^4 and ^5 in Figure 3, though their current fault-tolerant 
priorities are identical, the sensor ^4 will be served first because it requires less bandwidth reservation 
than S5. After the system deployment, each sensor in the system has a default fault-tolerant priority. 
During the system operation, according to the perceived information, the control node dynamically 
selects a new fault-tolerant priority as the current priority for the sensor from its fault-tolerant priority 
set. If the control node perceives channel impairments, it will first provide reliability assurance for the 
sensors with higher priorities in the queue. 

We will give detailed illustration of how to adjust the fault-priority based on some parameters in the 
following section. 

(1) . Activation threshold 

The parameter 6 is defined as the activation threshold for triggering the adjustment of the 
fault-tolerant priority of the sensor. For the sake of simplicity, we use one activation threshold for the 
whole system. As illustrated in Figure 4, the activation threshold is ^= 0.4. 

(2) . Priority tuner 

Priority tuner is used to adjust the current fault-tolerant priority of the sensor. For any fault-tolerant 
priority p of the sensor 5/ in the fault-tolerant priority set, the priority tuner is represented by rriip. If ruip 
exceeds the activation threshold, then the priority p may be activated as the new current priority. All 
priority tuners of fault-tolerant priorities for the sensor Si will be set to 0 when its current fault-tolerant 
priority is reset. 

(3) . Adjustment factor 

dip(t) is defined as the adjustment factor of the fault-tolerant priority p for the sensor Si at time t. If 
the fault-related information is favorable for the priority p, dip(t) will increase. Otherwise, dip(t) will 
decrease. For example, for the body temperature biosensor Stempemture, its fault-tolerant priority set is 
{pu Pi, Ps}, where p\> p2> Ps. According to Table 2, at time t, if the body temperature is low without 
fluctuation, then dip^(t) < dip^it) < dip^(t). If the body temperature is high and sharply fluctuating, then 
Sip (t) < dipit) < dipit) and dipit) may be negative. 



Table 2. Impact of body temperature on fault-tolerant priority. 



Sensor readings 


Pi 


P2 


P3 


Low temperature 


unfavorable 


favorable 


favorable 


Normal temperature 


favorable 


unfavorable 


unfavorable 


High temperature 


unfavorable 


favorable 


favorable 


Large fluctuations in temperature 


unfavorable 


unfavorable 


favorable 
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(4). Priority acquiescence 

The priority acquiescence parameter lip(t) is used to prevent frequent changes in priority. It 
represents the time period in which the sensor Si wants to maintain the activation of the fault-tolerant 
priority p. The function acquiescence^p(0 indicates whether the sensor Si will acquiesce in its 
fault-tolerant priority p: 

fl, If p has been active for /I. (t) at time^ 
acquiescence ip(t) = < (]\ 
[O, Otherwise 

If a fault-tolerant priority p of the sensor Si has been activated for more than lip(t) at time t, then 
acquiescence^p(0=l. Otherwise, acquiescence^^(0 = 0. This function means that the sensor Si will 
acquiesce in the fault-tolerant priority p until Si has used the priority p for the time period of lip(t). 

The current fault-tolerant priority tuner of the sensor Si is re-calculated as follows: 

%(0) = 0 (2) 
% (0 = [% - 1) + (0] X acquiescence^^ _ (t) (3) 



Figure 4. Switching of fault-tolerant priority. 




state 0 State 1 State 2 State 3 State 4 State 5 
State changes 



As shown in Figure 4, the current fault-tolerant priority of the sensor Si is initially Pcurrenu and ruip is 
set to 0. If p current IS acquicsccnt at time t, then mip{t) = 0 (see e.g.. State 0, State 3 and State 5 in 
Figure 4). Otherwise, rtiip will continue to change based on the adjustment factor dip(t) over time unless 
the priority tuners of some fault-tolerant priorities exceed activation threshold 6, when the control node 
will activate a new fault-tolerant priority for the sensor Si (e.g., p2 is activated at State 2 in Figure 4) 
and all priority tuners of the sensor 5/ will be set to 0 (see e.g.. State 3 and State 5 in Figure 4). When 
multiple priorities' tuners exceed activation threshold 6 at the same time, the highest priority will be 
activated (e.g., ps is activated at State 4 in Figure 4). 
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4.3. Resource Reservation Based on Priority Queue 

In order to reduce the effect of channel impairments, AFTCS adopts a channel bandwidth 
reservation method, which is similar to the approach used in [11,21]. The control node measures the 
available channel bandwidth at runtime. When it finds out that the channel impairments occur, it will 
re-allocate the bandwidth to the sensors according to the fault-tolerant priorities and the bandwidth 
requirements. The bandwidth reservation method includes three parts: effective bandwidth 
measurement, bandwidth requirements calculation and bandwidth allocation based on the fault-tolerant 
priority, as shown in Figure 5. The effective bandwidth represented by the time interval is divided into 
two parts: reserved bandwidth and best-effort bandwidth. Based on the priority queue, the reserved 
bandwidth is allocated to the sensors with higher priorities, while the sensors with lower priorities may 
be served by best-effort communications, and T/ x Di represents the time allocated to the sensor 5/ to 
send Di packets within each time interval. In the cases of initiation of a new sensor, changes in 
effective bandwidth or sensors' priorities, etc. Ti x Di may be recalculated to reallocate the effective 
bandwidth. For example, for S3 and S4, on account of the changes in their priorities, we can reserve 
bandwidths for S4, while S3 is served by best-effort communications. 



Figure 5. Bandwidth reservation based on priority queue. 




Conventional bandwidth measurement methods usually depend on radio platforms. For example, in 
CODA [22], each node samples the channel information periodically to get the effective channel 
bandwidth at runtime. This method is effective for radios with the carrier sense ability. However, it is 
not suitable for frequency hopping spread spectrum radios such as Bluetooth [23]. AFTCS adopts the 
same bandwidth measurement method used in [11], which is a radio-agnostic method based on Virtual 
MAC (VMAC). 

The control node sends a polling packet to the biosensor to request the sensor to send 
acknowledgement packets within specific time. The control node will record the actual waiting time 
and the number of packets successfully received. In this case the effective channel bandwidth is: 
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jyjjr ^^^^ph ^ ^received ^^^^ pollingPkt 

^^effec,ive= ' (4) 

wait 

where SizCpu and SizepoiungPkt are the data payload of data packet and poUing packet size in bytes, 
respectively. If Ty^;ait = Ti x Di + TmaxPkt and N received = 0, then the poUing packet is considered lost. 

As illustrated in Figure 5, in order to adaptively schedule bandwidth, we should dynamically 
calculate the values of Di and Ti. In the case of channel impairments, the effective bandwidth BWeffecttve 
will decrease, and the allocated time for sending one packet Ti will increase, which is given as follows: 

[ ^^ideal ] 

T. = min < T^.^pj^ x ' , T^pj^ > (5) 

[ effective J 

where BWideai = (Npkt x Spkt x ^dlTintervaU Npkt is the maximum number of packets that can be received or 
transmitted within each TintervaU assuming a clean channel, Spkt is the data payload of each packet size in 
bytes, and TmaxPkt is the maximum MAC response time for handling a packet transmission request. 
In the ideal case, Ti = TminPkt- Hence we can get: 

BW / BW 

T\ r\ ideal ^ ^ effective 

D,=D,x . (6) 

i minPkt 

For highly delay-sensitive sensors, the number of the packets transmitted within each time interval 
should not be less than Kmin- As a result, the D. is recalculated as follows: 

f BW / BW 1 

^' \ ideal ^ ^ effective 

D. = max \ D. x — ^ , K^^ \ (7 ) 

[ ^i ^ ^minPkt J 

The method described above assumes that all the sensors have fixed priorities. However, the 
priorities will be adjusted due to the change of physiological and external environments. Moreover, the 
bandwidths of some sensors cannot be reserved successfully due to the limited system resources. To 
tackle these problems, we present a feasible decision-making control of bandwidth allocation. 

We compute the requested data bandwidth BWrequtred and compare it with the actual effective 
bandwidth BWejfecttve- Then we allocate the bandwidth based on the dynamic fault-tolerant priorities. 

Different from [11], the bandwidth reservation for fault-related information is considered as a 
portion of BWrequtred- As iUustratcd in Figure 6, the requested data bandwidth BWrequtred includes four 
parts: (1) Reservations for non-polling packets (e.g., control packets for activation and dormancy) from 
the control node to sensors BWcscomroU (2) Reservations for fault-related information packets (e.g., the 
packets including the information of battery usage, buffer usage, etc.) from sensors to the control node 
BWscaware\ (3) Rcscrvatious for sampled data packets from sensors to the control node BWscdata\ 
(4) Reservations for polling packets from the control node to sensors BWcspoiitng- We can consequently 
get the bandwidth requirements of all reservations in the system as follows: 

BW =BW +BW +BW +BW 

^ required ^ CScontrol ^ ^ SCaware ^ ^ SCdata ^ ^ CSpolling \0 ) 
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Figure 6. Bandwidth reservation requirements. 
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Figure 7 illustrates the process of bandwidth reservation decision-making. BWcscontroi and BWscaware 
are reserved fist, and then the bandwidths of BWcspoiiing and BWscdata for sensors are reserved according 
to the order of fault-tolerant priority queue. We use an approach similar to BodyQoS [11] to divide the 
effective bandwidth into three parts: 0-Bl x BWeffective. Bl x BWeffective - Bh x BWejfective. and 
BhX BWejfective^BWejfective, whcrc 0 < Bl < Bh < 1. The control node allocates unused wireless resources 
for best-effort conmiunications. 



Figure 7. Channel reservation decision-making. 




Algorithm 1 presents the pseudocode of the bandwidth reservation control algorithm used in 
AFTCS. A reservation sensor queue Qreserved and a queue Qremoved containing all sensors removed from 
reservation queue are maintained through minimum heap and maximum heap respectively based on 
reliability requirements of sensors. If multiple sensors need to re-reserve bandwidth for fault-tolerance 
simultaneously, the sensors will be processed in priority descending order. The new reservation Sadd for 
the sensor is handled according to the total required bandwidth BWrequired (including the new 
reservation): 

(1) If the total required bandwidth BWrequired S BlX BWeffective, then the new reservation Sadd is 
acceptable and Sadd is added into Qreserved- 

(2) Under the condition of Bl x BWeffective < BWrequired ^ BhX BWejfecUve, if the fault-tolerant priority 
of Sadd is not less than the lowest fault-tolerant priority in Qreserved, then its new reservation is accepted 
and Sadd is added into Qreserved- Otherwise, its new reservation is refused and Sadd is added into Qremoved- 

(3) Finally, in the case of the total required bandwidth BWrequired > BhX BWeffective, if it can make 
enough space for the new reservation Sadd by removing the bandwidth of sensors with lower priorities 
from Qreserved, thcu the new reservation Sadd is accepted. Otherwise, it is rejected. In the process of 
removing the sensors from Qreserved, three situations may occur: 

• If all sensors with lower priorities than Sadd in Qreserved have been processed and the aggregate 
bandwidth of them (i.e.. Sum) is still less than BWrequired~BH x BWeffective, then the new 
reservation of Sadd is rejected and Sadd is added into Qremoved- 

• If the aggregate bandwidth {Sum) of the sensors (Qtemp) that may be removed from Qreserved 
satisfies that Sum < BWrequired~BH x BWeffective, then the current sensor is added into the 
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temporary queue Qtemp, and the next sensor with lower priority than Sadd in Qreserved will be 
checked. 

• If the aggregate bandwidth of sensors (Qtemp) that may be removed from Qreserved satisfies that 
Sum > BWrequired~BHX BWeffective, thcu the ucw rcservatiou of Sadd^^ acceptable; Sensors in Qtemp 
are removed from Qreserved and added into Qremoved', and Sadd is added into Qreserved- 

For the sensors in Qremoved, they are served by best-effort communications temporarily. However, in 
the following four situations, their bandwidths may be re-reserved: (1) the fault-tolerant priorities 
increase; (2) the fault-tolerant priorities of sensors in Qreserved decrease; (3) the bandwidth requirements 
are reduced; (4) the effective bandwidth increases. 

Algorithm 1. Bandwidth reservation control algorithm. 

RCQUirC* Qreserved-) Qremovedi Saddi B^W effective-) BW^requirg^, B]^, Bfj 



Il/IlSllrC ^yfiewreserved:) Se^newremoved 

1: if BWrequired<BL^BWeffectivei\y^^ 

2. Qnewreserved Qreserved-^^^i.Sadd) 

3. Qnewremoved ~ Qremoved 

4: return 

5: else 

6: if BWrequired<BHXBWeffectivet^^^ 

7: if the priority of Sadd is not higher than Q^e^ervej-niinPriorityO then 

Qnewreserved Qreserved 

^ - Qnewremoved Qremoved-^^^iS add) 

10: return 

11: else 

12. Qnewreserved Qreserved-^^^iS add) 

13. Qnewremoved ~ Qremoved 

14: return 

15: end if 

16: else 

17: Sum=0 

18: Iterator - Qresewed-^^S^^O 

19: while Iterator != Qreserved-^^^0 and the priority of Iterator is lower than S^jj.priorityO 

20: Qtemp-^dd(Iterator) 

2 1 : Sum + = /^^ra^or.bandwidth() 

22: Iterators- + 

23 : if Sum > BWrequired-Bu XBW effective theU 

24. Qreserved Qreserved-^^^^^^(.Qtemp) 

25. Qnewreserved ~ Qreserved-^^^i.Sadd^ 

26. Qnewremoved ~ Qremoved-^^^i.Qtemp) 

27: return 

28: end if 

29: end while 

30: end if 

31: end if 

32. Qnewreserved Qreserved 

33. Qnewremoved Qremoved-^^^i^Sadd) 
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4.4. Time Complexity Analysis 

Theorem 1: The time complexity of AFTCS is T{n) = 0(nlgn), where n is the number of sensors in 
the system. 

Proof. The fault-tolerant channel allocation algorithm based on the priorities mainly maintains two 
fault-tolerant priority queues: the reservation sensor queue Qreserved and the queue Qremoved containing 
all sensors removed from the reservation queue. Qreserved and Qremoved are maintained through minimum 
heap and maximum heap respectively. Suppose the number of sensors in the system is n and the 
number of sensors in Qreserved is m (0 < m < n), then the number of sensors in Qremoved is n-m. For 
Qreserved, the time Complexity for building the minimum heap is 0(m); the time complexity for the 
insertion or removal of the sensor is O(lgm); the time complexity for the traversal of all sensors is 
O(mlgm). Similarly, for Qremoved, the time complexity for building the maximum heap is 0{n-m)\ the 
time complexity for the insertion or removal of the sensor is 0(lg(^-m)); the time complexity for the 
traversal of all sensors is 0((n-m)lg(n-m)). Therefore, the time complexity is as follows. 



5. Performance Evaluation 

We evaluated AFTCS on the Castalia simulator [24]. Castalia is an open source, discrete 
event-driven simulator based on OMNeT++ [25]. The experiment simulates a typical body sensor 
network, in which sensors measure a person's physiological parameters. We configure the body sensor 
network with three types of biosensors: ECG sensor, Sp02 sensor and Temperature sensor. All nodes 
adopt Castalia standard CC2420 IEEE802.15.4 radios. In the whole experiment seven fault-tolerant 
priorities are adopted. The range of fault-tolerant priority is 0'-6, where a smaller value indicates a 
higher priority. Tables 3 and 4 describe the detailed simulation parameters and sensor node 
specifications, respectively. We compare our AFTCS scheme with the BodyQoS scheme [11]. 



T(n) = 0(mlgm) + 0((n - m) \g{n - m)) = 0{n\g n) 



(9) 



Table 3. Simulation settings. 



Parameter 



Value 



Number of sensor types 
Wireless channel model 
Path loss exponent 
Collision model 
Physical and MAC layer 
Data transmission rate 
Buffer size 

Max physical layer frame size 
Physical layer frame overhead 
MAC layer frame overhead 
Ideal noise floor 
Simulation time 
Number of simulation runs 



2.4 

Additive interference model 

IEEE 802.15.4 standard 

250 Kbps 

1,024 KBytes 

127 Bytes 

6 Bytes 

13 Bytes 

-100 dBm 

600 s 

50 



Log shadowing wireless model 



3 
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The simulation includes six time periods. In the first time period (0 s-lOO s), the system operates in 
an ideal state, and the readings of all sensors are normal. In the second time period (100 s-'200 s), noise 
signals are generated to introduce the channel impairment. The noise floor is increased to -80 dBm. In 
the third time period (200 s-^SOO s), the noise floor is increased to -70 dBm. Besides, the readings of 
the temperature sensor become high with large fluctuations. In the fourth time period (300 S'-400 s), 
the readings of the Sp02 sensor become exceptional and the readings of the temperature sensor become 
normal. In the fifth time period (400 s-^SOO s), the noise floor is reduced to -80 dBm. In the sixth time 
period (500 S'-600 s), the noise floor becomes ideal. In other words, the system operates in an ideal 
state once again. 

Table 4. Sensor node specifications. 

Parameter ECG Sp02 Temperature 

Payload size (Bytes) 50 25 2 

Transmission rate (packets/s) 10 8 1 

High delay sensitivity Yes Yes No 

Priority set {0, 1, 2, 3} {2, 3, 4, 5} {3, 4, 5, 6} 

Initial priority 2 4 5 



In the whole experiment, two metrics are used for performance evaluation: packet loss rate and 
average packet latency. The packet loss rate is used to evaluate the performance of reliability and the 
average packet latency is used to evaluate the performance of timeliness. 

Figure 8 presents the fault-tolerant priority changes of each sensor during the simulation. In the first 
time period, the fault-tolerant priorities of all sensors decrease, because they have operated in the 
fault-free state for a certain time. In the second time period, the priorities of the ECG sensor and the 
Sp02 sensor increase due to the channel impairment, while the priority of the temperature sensor 
doesn't change, because its channel sensitivity is relatively low. In the third time period, the priorities 
of the ECG sensor and the Sp02 sensor further increase due to the increase of the noise level. The 
priority of the temperature sensor increases rapidly because of the abnormality of readings and the 
channel impairment. In the fourth time period, the priority of the Sp02 sensor increases, and the 
priority of the temperature sensor decreases for the changes in the readings. In the fifth time period, 
there is a decrease in the priority of the ECG sensor owing to the reduction of the noise level. In the 
sixth time period, the fault-tolerant priorities of all sensors decrease because they have operated in the 
fault-free state for a certain time. Obviously, the reliability requirements of different biosensors can be 
maintained at runtime by fault-tolerant priority. 
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Figure 8. Fault- tolerant priority changes. 




The packet loss rates of BodyQoS and AFTCS are shown in Figure 9. In time Periods 1-2, the 
packet loss rates of BodyQoS and AFTCS are basically the same. However, from Period 3, for the 
sensors with higher demand of reliability, AFTCS achieves lower packet loss rates than BodyQoS. The 
reason is that, AFTCS re-allocates bandwidth according to the new fault-tolerant priorities to first 
provide reliability assurance for the sensor nodes with higher demand of reliability, while BodyQoS 
still allocates bandwidth according to the original fixed priorities. It is worth noting that during time 
periods 3, 5 and 6, two sensors have the same fault-tolerant priorities, and the one requiring less 
channel resources is served first. 

Figure 9. Packet loss rate. 
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As can be seen from Figure 10, for the sensors with higher demand of rehabihty, AFTCS achieves 
lower average packet latency than BodyQoS at runtime. With AFTCS, the transmission of fault-related 
packets has little effect on packet latency. This is because the fault-related packets are transmitted only 
when some failures occurred or may occur. Taking the fault-tolerant data packets of the buffer 
overflow failure for example, the sensors don't send the buffer-overflow-related information to the 
control node unless the buffer utilization is higher than 80% or 90%. Therefore, basically it doesn't 
affect the reliable data communication of BSN. 



Figure 10. Average packet latency. 
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6. Conclusions 

In this paper, we have presented an adaptive fault-tolerant communication scheme (AFTCS) based 
on fault-tolerant priorities for BSNs. AFTCS can tolerate channel impairments by exploiting resource 
reservation. The fault-tolerant priority and queue are employed to dynamically adjust the channel 
bandwidth allocation so as to fulfill the reliability requirements of critical sensors. Simulation results 
show that AFTCS can reduce the effect of channel impairments while guaranteeing lower packet loss 
rates and latency for the sensors with higher demand of reliability at runtime. The primary 
contributions of this paper are summarized as follows: 

(1) An asymmetric fault-tolerant architecture is proposed, in which resource-constrained sensor 
nodes do little processing and the control node with abundant resources performs the majority of 
fault-tolerant operations. 
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(2) An adaptive priority management method is presented, which can dynamically adjusts the 
fault-tolerant priorities of sensors according to the perceived information, thus guaranteeing the 
priorities of critical sensors during runtime. 

(3) A resource reservation method based on dynamic priority queue is presented. In case of channel 
impairments, the packet loss rates for critical sensors will be decreased after channel reservation, and 
the times of retransmission will be reduced, thus shortening the average transmission latency. 

In the future, we will design a parameter update strategy to configure parameters dynamically during 
runtime based on knowledge learned from previous experiences and evaluate AFTCS (e.g., in terms of 
energy efficiency) by means of more extensive simulations. We also consider implementing and testing 
the scheme on real-life BSNs that can take advantage of the adaptive and flexible fault-tolerant 
communication enabled by AFTCS. 
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